Your reasoning applies identically to Netflix videos, Kindle e-books, and podcast files delivered via Overcast or some other podcatcher.

It is hard to imagine, since the mechanics here are the same as streaming video. The code that's executing on your device is not being streamed. Images and video are.

> I'm no expert

That seems obvious.

https://www.wired.com/story/android-zero-day-more-than-ios-z...